slam ransomware builder installer[.]exe | Triage

Sharing

General

Target

slam ransomware builder installer.exe
Size

4.7MB
MD5

4b83e7f40fa48d0b630d16d9ae110cfc
SHA1

8c9d8009878f234d701e8bf09f6cd5a5747a6aa6
SHA256

eced325735636ed140a5da96f08b58d0f46ecd1400038ab56df37ee82bd51afd
SHA512

9f7b775f07c842c81a4f909fe242bc806c6aacb0f620203d397d14d1dc0d16d42e1083d56a5c3a141121a572d48f62853b91d5c81111eb9fbdf84168841d9b33
SSDEEP

98304:pxDbjhpAUN/vsdZi9AGI/vsdZi9AxYyTWb3LRKMl3xVDEVh2:72Ziu12ZiuxZwVKu3XDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slam ransomware builder installer.exe

Files

slam ransomware builder installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\amdga\source\repos\slam ransomware builder installer\slam ransomware builder installer\obj\Debug\slam ransomware builder installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ